4107 matches found
Design/Logic Flaw
cPanel before 74.0.8 allows self XSS in WHM Style Upload interface SEC-437...
Design/Logic Flaw
cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface SEC-428...
Design/Logic Flaw
cPanel before 74.0.8 allows FTP access during account suspension SEC-449...
CVE-2018-20894
CVE-2018-20894 affects cPanel prior to 74.0.0, where website contents can be exposed to other local users via Git repositories. Root cause: misconfiguration in Git repositories used by the web-site content handling allows local users to access content that should be restricted. Impact: partial co...
CVE-2018-20894
cPanel before 74.0.0 makes web-site contents accessible to other local users via Git repositories SEC-443...
CVE-2018-20893
Affected software: cPanel. Vulnerability: core issue allows file-rename operations during account renames (SEC-442) prior to version 74.0.0. Root cause details are not expanded beyond this description in the provided documents. Impact: exposes unintended file-rename behavior during account rename...
CVE-2018-20893
cPanel before 74.0.0 allows file-rename operations during account renames SEC-442...
CVE-2018-20892
CVE-2018-20892 affects cPanel prior to 74.0.0, where incorrect handling of CAA records allows arbitrary zone file modifications. Root cause: CAA handling flaw in the affected component. Impact per sources is modification of DNS zone data. No exploitation details or patches are specified in the pr...
CVE-2018-20892
cPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling SEC-439...
CVE-2018-20891
cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration SEC-436...
CVE-2018-20891
CVE-2018-20891 affects cPanel prior to 74.0.0, where File Restoration can perform arbitrary file-read operations. The vulnerability is triggered during File Restoration and is reported with a local attack vector and low complexity, with confidentiality impact listed as HIGH in CVSS. Some sources ...
CVE-2018-20890
CVE-2018-20890 is associated with cPanel prior to 74.0.0 and is described as allowing arbitrary zone file modifications during DNS record edits (SEC-426). The connected sources confirm the affected software and the root cause is the ability to modify zone records during edits, implying integrity ...
CVE-2018-20890
cPanel before 74.0.0 allows arbitrary zone file modifications during record edits SEC-426...
CVE-2018-20889
cPanel before 74.0.0 allows certain file-read operations via password file caching SEC-425...
CVE-2018-20889
CVE-2018-20889 affects cPanel prior to 74.0.0, where the password file caching mechanism allows certain file-read operations. The description indicates this is a vulnerability in how password file caching can be exploited to read files, but exploitation specifics, affected versions beyond the pre...
CVE-2018-20888
CVE-2018-20888 affects cPanel prior to 74.0.0, where an incorrect HTTP authentication context allows file modification by the root account. This is a local vulnerability with impact on integrity (as per the mounted CVSS data) and does not appear to have publicly documented exploitation details or...
CVE-2018-20888
cPanel before 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication SEC-424...
CVE-2018-20887
cPanel before 74.0.0 allows SQL injection during database backups SEC-420...
CVE-2018-20887
CVE-2018-20887 affects cPanel prior to version 74.0.0, where a vulnerability in the database backup process allows SQL injection. The public description states the issue occurs during database backups and is labeled as SEC-420; multiple sources corroborate that the lack of input validation/execut...